safarov/certbot repository overview

docker run -p 80:80  \
           -v /etc/letsencrypt:/etc/letsencrypt \
           safarov/certbot --rsa-key-size 4096 \
                   -m [email protected] \
                   -d certbot.example.com

docker run -p 80:80  \
           -v /etc/letsencrypt:/etc/letsencrypt \
           safarov/certbot --test-cert --rsa-key-size 4096 \
                   -m [email protected] \
                   -d certbot.example.com

[Unit]
Description=certbot container
After=docker.service network-online.target
Requires=docker.service


[Service]
Type=oneshot
IOSchedulingClass=idle
Nice=19
#One ExecStart/ExecStop line to prevent hitting bugs in certain systemd versions
ExecStart=/bin/sh -c 'docker rm -f certbot; \
          docker run -t -p 80:80 --name certbot \
                 -v /etc/letsencrypt:/etc/letsencrypt \
                 safarov/certbot renew; \
          docker rm -f certbot'

# Uncomment next commnad if you want copy new certificate to other host
#ExecStartPost=/usr/bin/rsync -e 'ssh -o "StrictHostKeyChecking=yes"' \
#                             --recursive --links /etc/letsencrypt \
#                             other-host.example.org:/etc/letsencrypt

[Unit]
Description=Renew certbot certificates every 15 days

[Timer]
OnBootSec=15d
OnUnitActiveSec=15m
Unit=certbot-docker.service

[Install]
WantedBy=multi-user.target

systemctl enable certbot-docker.timer